This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File:                     9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier:          zzH/Iztr0GfpscQ2urqhzVGMN7WUU90S9YHT/pT2wAA=
Subject key identifier:   53:5A:AC:A5:DE:1D:C4:22:A8:8D:08:3A:C7:28:EC:11:3F:A6:62:4F
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer:       /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial:       019AF2402876B027880F15714F2595043710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number:          06FB
Signing time:             Sat 06 Dec 2025 06:01:22 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:22 +0000
Manifest next update:     Sun 07 Dec 2025 06:01:22 +0000
Files and hashes:         1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: yuEWR0Bx71oHavXkJZsv+NxxOPMjmk7ltieurdN5Suw=)
                          2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
                          3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:40:28:76:b0:27:88:0f:15:71:4f:25:95:04:37:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f566016d878230128b58e279d661c195e6399588
        Validity
            Not Before: Dec  6 06:01:22 2025 GMT
            Not After : Dec  7 06:01:22 2025 GMT
        Subject: CN=535aaca5de1dc422a88d083ac728ec113fa6624f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:97:e4:55:fa:00:51:30:ee:8c:f2:29:b0:
                    38:f9:b2:ca:09:dd:51:b7:1c:fc:68:7f:11:b6:d5:
                    69:44:81:1a:91:dd:dc:0b:c8:6c:a4:8e:82:9d:de:
                    e7:a3:d4:81:68:43:50:50:b9:28:dd:5a:e7:41:0b:
                    22:59:2d:e2:48:d3:f0:80:ab:e2:d6:02:85:95:c3:
                    6d:f1:60:86:49:97:95:7b:55:e4:b0:60:a0:fc:a5:
                    d3:e7:a8:d3:b5:99:99:f7:5f:03:30:a8:f0:cc:b2:
                    48:df:7b:c1:ec:fe:af:92:fb:30:b9:e2:bf:5c:93:
                    ba:fd:7c:a6:20:df:48:9b:d1:6c:11:bc:99:19:51:
                    a8:ac:ba:cd:71:d4:2f:a5:6e:5b:e1:15:68:b9:24:
                    a3:f2:39:ba:7a:15:33:a9:e2:10:ae:7e:06:c0:26:
                    b9:b5:3d:0e:44:c1:c6:21:66:52:6f:bb:33:1b:78:
                    b2:b7:09:e5:ca:41:36:8d:fc:c3:d4:03:bb:fa:53:
                    70:28:1f:ab:0d:8f:8e:b2:8e:22:c9:1c:31:1e:4e:
                    89:ae:e8:f4:da:d6:f3:48:0b:cc:e1:6e:bd:b3:d6:
                    f9:02:cb:7a:c3:16:96:07:b1:f7:36:95:6a:b3:ca:
                    8b:ef:52:12:d3:10:f2:47:d5:78:5e:06:90:30:6d:
                    e3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5A:AC:A5:DE:1D:C4:22:A8:8D:08:3A:C7:28:EC:11:3F:A6:62:4F
            X509v3 Authority Key Identifier:
                keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:26:6f:fc:dc:e0:91:89:b8:04:a3:49:14:cb:05:9a:37:e8:
         45:33:7a:3d:71:7d:01:4d:f1:38:3e:ec:df:8e:d3:dc:9e:2b:
         e5:ce:3d:08:14:da:00:b9:b5:39:3d:fb:97:d5:4f:ad:8e:aa:
         e1:b9:0b:d1:96:17:be:49:cd:5e:0f:d7:8b:d1:c5:91:6c:a0:
         04:59:f4:4a:40:cf:4c:0c:2a:1b:d4:f1:99:93:f2:c1:ea:f3:
         75:57:21:3f:44:e7:1d:2b:e4:98:05:16:5b:cc:48:8f:a3:ca:
         28:13:18:04:e6:07:17:08:6e:ee:2e:e7:1c:09:7b:b4:b7:f7:
         ca:7c:2c:e1:4b:27:61:45:ea:87:66:b0:d9:67:85:b2:0e:cb:
         f5:c3:df:15:06:1a:66:ef:fe:5a:e7:2c:03:f4:e9:70:be:59:
         eb:2a:d5:db:21:9b:4a:63:40:3b:1b:64:ff:40:73:26:bf:bb:
         bb:0f:51:91:a9:22:bf:36:e0:6a:93:41:6f:66:fe:a8:9e:e6:
         3b:68:4c:51:b1:41:5d:f8:64:b5:1b:ca:28:99:eb:11:07:63:
         62:eb:1e:9c:8c:bd:76:06:1f:48:85:ba:cc:e8:a0:e3:d7:d9:
         a8:53:e7:73:f5:08:58:5f:be:29:1f:89:06:49:1c:ee:54:33:
         7c:6d:e5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:52:39 2025 by rpki-client